CLF-C01 Exam - Question 28

shield is the answer to DDoS if you see DDoS, choose shield

You can use AWS WAF, AWS Shield, and AWS Firewall Manager together to create a comprehensive security solution. Use AWS WAF to monitor requests that are forwarded to your web applications and control access to your content. Use AWS Shield to help protect against DDoS attacks. Use AWS Firewall Manager to set up your firewall rules and apply the rules automatically across accounts and resources, even as new resources are added.

In the exam on 17/03/2023

Answer is C WAF is only protecting from layer 7 attacks, basically web attacks

DDoS = Shield Inspector = Instance Guardduty= s3

Of course C: https://aws.amazon.com/shield/?whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc "AWS Shield is a managed Distributed Denial of Service (DDoS) protection"

C. AWS Shield "AWS Shield is a managed service that provides protection against Distributed Denial of Service (DDoS) attacks for applications running on AWS. AWS Shield Standard is automatically enabled to all AWS customers at no additional cost. AWS Shield Advanced is an optional paid service. AWS Shield Advanced provides additional protections against more sophisticated and larger attacks for your applications running on Amazon Elastic Compute Cloud (EC2), Elastic Load Balancing (ELB), Amazon CloudFront, AWS Global Accelerator, and Route 53." https://aws.amazon.com/shield/faqs/

Both B& C seem to be true. The WAF protects against DDoS web app exploits.

Vote for C

c shield, firewall is to protect from web app attacks

Vote for C. Shield or Shield Advanced

The correct answer is: C. AWS Shield A. Amazon GuardDuty → Amazon GuardDuty is a threat detection service that helps identify malicious activity, but it is not specifically focused on DDoS protection. It provides insights into security threats like unauthorized access but doesn't prevent DDoS attacks. B. AWS WAF → AWS Web Application Firewall (WAF) is used to protect applications from web application attacks (e.g., SQL injection, cross-site scripting), but it doesn't specifically provide DDoS protection. However, it can work in conjunction with AWS Shield for enhanced security. D. Amazon Inspector → Amazon Inspector is an automated security assessment service that helps identify vulnerabilities in applications, but it doesn't provide DDoS protection.

This should be B. - AWS WAF https://docs.aws.amazon.com/waf/latest/developerguide/what-is-aws-waf.html

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. https://aws.amazon.com/shield/?nc1=h_ls&whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc

protecting applications is through WAF, shield is for other resources https://docs.aws.amazon.com/waf/latest/developerguide/what-is-aws-waf.html

AWS Shield is correct

Shield - DDOs Protection

c shield, firewall is to protect from web app attacks

C is the answer.

https://aws.amazon.com/shield/

AWS Shield standard and shield advanced protect from DDO's attacks.

correct answer is C

I vote for C

C. AWS Shield

C- AWS Shield

i think its A

C. AWS Shield

C. AWS Shield

C. AWS Shield

Automatic protection: AWS Shield provides automatic protection for all AWS customers against common and most frequently observed DDoS attacks, without the need for any additional setup. DDoS response team: AWS Shield has a dedicated DDoS Response Team (DRT) available 24/7 to monitor and mitigate DDoS attacks, providing expertise and support during an attack. Scalability: AWS Shield is designed to scale and handle high-volume DDoS attacks, leveraging AWS's global network infrastructure.

AWS Shield

Shield to protect applications from DDoS attacks.

Amazon GuardDuty and AWS WAF offer additional security features, they are not specifically designed for mitigating DDoS attacks like AWS Shield.

AWS Shield is a managed distributed denial of service (DDoS) protection service that safeguards applications running on AWS

AWS Shield

AWS Shield - IT PROTECTS FROM DDOS attacks